Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack

/in

Fake automated commits injected GitHub Actions workflows containing payloads to steal credentials, CI secrets, keys, and tokens.

The post Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack appeared first on SecurityWeek.

SecurityWeek – ​Read More

Looking for a new computer? Save hundreds on these Memorial Day desktop dea...TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIOTrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI,...